Sophia by Shirley respects your privacy. This policy explains what personal information we collect, how we use it, and the choices you have. We handle personal data in line with Malaysia’s Personal Data Protection Act 2010 (PDPA).
Who we are
Your personal data is collected and controlled by Sophia by Shirley Enterprise (business registration no. 201603291930 (SA0398795-A)), Zenith Corporate Park, E-51-G, No. 1 Jalan SS7/26, 47301 Petaling Jaya, Selangor, Malaysia.
What we collect
- Your name, WhatsApp number, and email address.
- Delivery and contact details, and your order history, when you buy or enquire.
- Your marketing preference — only if you choose to hear from us.
- Basic usage information about how the site is used, to keep it working well and to measure our advertising.
Advertising
We advertise on Facebook and Instagram. To measure whether those adverts work, we share information about activity on this site — pages viewed, items added to a bag, searches, wishlist adds, and completed orders — with Meta Platforms Ireland Limited. This happens both from your browser and from our own server.
Where you have agreed to hear from us, we also share a scrambled (one-way hashed) form of your email address and phone number, so Meta can tell whether the person who bought is the same person who saw the advert. We never send Meta your name, address, or order contents in readable form. If you have not agreed to marketing, or you later withdraw, we do not send these details at all.
This means some of your personal data is transferred outside Malaysia, to Meta in Ireland and the United States. You can withdraw your consent at any time — just message us on WhatsApp and we’ll update your preference. You can also limit this in your own Facebook and Instagram ad settings.
How we use it
- To take, fulfil and deliver your orders, and to provide customer service.
- To respond to your enquiries and keep you updated on your order.
- With your consent, to give you first access to new pieces and the occasional offer. You can withdraw this consent at any time.
Consent & your choices
We only send you marketing messages if you’ve opted in. You can opt out or withdraw your consent whenever you like — just message us on WhatsApp and we’ll update your preference.
Who we share it with
We don’t sell your personal data. We share it with the service providers we need to fulfil your order — such as our payment processor (Stripe) and delivery couriers — with our advertising partner Meta (see Advertising above), and only as far as needed to do so, or where the law requires it.
How long we keep it
We keep your information for as long as needed to provide your orders and meet our legal obligations, and for as long as you wish to hear from us.
Your rights
You can ask us to access, correct or delete your personal data, or to stop using it for marketing. To make a request, message us on WhatsApp and we’ll help.
Security
Your information is held on our own managed infrastructure and transmitted over an encrypted connection. Payment card details are handled directly by our payment processor and are never stored on our servers.
Cookies
We use the cookies needed to run the site — for example, to keep your cart and session — together with first-party usage measurement and Meta’s advertising cookies (see Advertising above). These are set for every visitor, whether or not you are signed in or have told us who you are.
Contact
Questions about your privacy? Message us on WhatsApp — we’re happy to help.
Last updated: August 2026.
